tree 8b37973a2e4bb6bf19afd88315cc1b8fe72477f8
parent f20772cc0a2eb5d66f59afe8b4fe3eeea5ca3687
author David Benjamin <davidben@google.com> 1586444375 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1586446358 +0000

Fix hash-to-curve comment.

511S + 3M isn't even enough operations to get up to 2^519-1. I dropped a
a bunch of terms. (We can get up to 2^512-1 with 511S + 9M. Then an
additional 7S + 3M finishes it up.)

Change-Id: Ibb1bc3491dfb09ab8a917498e99deb66e4894cf0
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/40644
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: David Benjamin <davidben@google.com>